fix: harden terminal-scoped analytics contracts

Keep JSON and bounded CSV exports on one canonical predicate, replace replayable offsets with encrypted tenant/filter-bound keyset cursors, and suppress merchant-grain peers under terminal scope. Validate period filters and align OpenAPI and capability specs with runtime behavior.
This commit is contained in:
2026-08-20 21:29:18 +03:30
parent 857f29635e
commit d6de48fd15
14 changed files with 577 additions and 103 deletions

View File

@@ -8,5 +8,6 @@ IMPORT_PATH=data/incoming/challenge_data.csv.gz
DEMO_USERNAME=merchant-0001
DEMO_PASSWORD=replace-with-at-least-12-characters
SESSION_SECRET=replace-with-at-least-32-random-characters
CURSOR_SECRET=replace-with-a-different-32-character-secret
FRONTEND_ORIGIN=http://127.0.0.1:5173
COOKIE_SECURE=false